Privacy Policy

1.Data controller

Hello World Solution Co., Ltd. (บริษัท ฮัลโหลเวิลด์ โซลูชัน จำกัด) is the data controller under Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA").

• Registered address: 11/63 Golden Neo 3 Rama 2, Phanthai Norasing, Mueang Samut Sakhon District, Samut Sakhon 74000, Thailand
• Email: support@helloworld-solution.com

Where we process data in a client's systems under a development or consulting contract, we act as a data processor on the client's instructions, and the client's privacy policy applies.

2.Data we collect

We collect only what we need to provide our services:

• Contact data: your name, email, company name and the message you send through the contact form or by email, and details you or your organisation give us when requesting a quote, signing a contract or attending training.
• Account data: when you sign in to one of our products through an external service such as Google or LINE, we receive your user ID, name, email and profile picture, and may create a device identifier for the device you use.
• Usage and purchase data: usage history, credit balance, packs purchased, amounts and payment transaction references.
• Text you send for processing: for example, text sent for translation when you choose an AI-powered feature. We send it for processing without your name or email and do not keep its content. We record only statistics such as the number and length of messages.
• Data you choose to share: for example, translations you agree to share with other users. Features like this are off by default, and you can turn them off or withdraw what you have shared at any time.
• Technical data: IP address, device and browser type, pages visited and system logs.

We never see or store your card number or bank details, and we do not ask for sensitive data such as health or religious information. Minors should have a parent's or guardian's consent before creating an account or making a purchase.

3.How we use data

We use data to:

• reply to your enquiries, arrange meetings and offer the services you ask about;
• perform our contracts, including creating accounts, verifying identity, providing our products and taking payment;
• keep accounting and tax records and comply with the law;
• keep our systems secure and prevent fraud and misuse;
• understand usage so we can improve our website, products and services.

We do not use your data for advertising, and we do not send you marketing you have not asked for.

4.Legal basis

We process data under the PDPA on the basis of contract (or steps you request before entering a contract), legal obligation, such as accounting and tax law, and our legitimate interest in keeping our services secure and improving them. For data you choose to share, we rely on your consent, which you can withdraw at any time without affecting earlier processing.

5.Sharing

We do not sell personal data. We share only what is necessary with service providers that process data on our behalf under contract:

• hosting, database and network providers;
• email and notification providers;
• the identity provider you choose to sign in with;
• payment providers (we never see or store card details);
• language processing (AI) providers used to translate or process text;
• website analytics providers.

We may also disclose data to auditors and professional advisers bound by confidentiality, when required by law or a competent authority, or as part of a merger or transfer of business, which we will tell you about in advance.

6.International transfers

Some of our service providers process data on servers outside Thailand, and some of those countries may not offer the same level of protection as Thailand. We transfer only what is needed to provide the service and choose providers with appropriate safeguards as required by the PDPA. If an option in one of our products sends data for processing in a country you should be particularly aware of, we tell you before you choose it.

7.Retention

We keep data only as long as needed for the purposes in this policy or as required by law. After that, we delete it or make it anonymous. User accounts are deleted within 30 days of receiving a request. Payment records are kept as required by accounting and tax law, without being linked to your name or email.

8.Cookies

Our website uses cookies that are necessary for it to work and analytics cookies that count visits without identifying you. We do not use advertising cookies. You can refuse or delete cookies in your browser settings, and the website will still work normally.

9.Your rights and account deletion

Under the PDPA, you have the right to access and obtain a copy of your data, to data portability, to correct your data, to have it deleted or anonymised, to restrict or object to processing, to withdraw consent, and to complain to the Personal Data Protection Committee.

To exercise your rights, email support@helloworld-solution.com. We may ask for more information to verify your identity and will reply within 30 days. We may decline part of a request where the law allows, for example for data we must keep under accounting and tax law, and we will tell you why.

Account deletion: email support@helloworld-solution.com from the address linked to your account with the subject "Account deletion request" and the product you use. If you signed in with an account that has no email, include your display name and the date you last signed in. When we delete your account, we remove your account data, name, email, profile picture and the link to your devices. Any remaining credit ends and is not refunded.

10.Use of Google user data

Our products' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

When you sign in with Google, we request only the openid, email and profile scopes and receive your user ID, email, name and profile picture. We:

• use this data only to verify your identity and show your account in our products;
• do not sell it, use or transfer it for advertising, or use it to determine creditworthiness;
• do not transfer it to others except as needed to provide the service, to comply with the law, or as part of a merger or transfer of business;
• do not allow anyone to read it unless you consent, it is needed for security, or the law requires it;
• do not use it to train or develop generalised AI models.

You can revoke access at any time in Google Account → Third-party connections.

11.Security

We send data over encrypted connections, limit access to people who need it for their work, and store system keys and passwords securely. If a personal data breach puts your rights at risk, we will notify the Personal Data Protection Committee and you as required by law.

12.Changes and contact

We may update this policy when our services or the law change. The latest version is always on this page with its effective date. If we make a material change, we will announce it on our website or in our products before it takes effect.

If you have any questions about this policy, contact us at support@helloworld-solution.com.